The mandate of the PDPC is derived from Section 7 of the Personal Data Protection Act encompassing the following:
1.Monitor compliance by data controllers and data processors of the provisions of the Act;
2.Register data controllers and data processors in accordance with the Act;
3.Receive, investigate and deal with complaints about alleged violations of the protection of personal data and privacy of persons;
4.Inquire into and take measures against any matter, that appears to the Commission to affect the protection of personal data and infringe privacy of the individuals;
5.Educate the public as may be appropriate to the implementation of objectives of the Act;
6.Undertake research and to monitor technological developments in data processing;
7. Establish mechanisms of cooperation with other data protection authorities from other countries, and advise the Government on matters relating to implementation of the Act; and
8.Perform other functions of the Commission for better implementation of the provisions of the Act.